getting $host from $

getting $host from $_SERVER

badger
Member
Posts: 76
Threads: 18
Joined: Apr 2015
Reputation: 2

02-27-2023, 02:14 AM

(02-26-2023, 07:17 PM)kenjis Wrote: Do not use $_SERVER['HTTP_HOST'] or $_SERVER['SERVER_NAME'] without validation.
Attackers may set any value to them.

thanks, I'm slowly learning

Messages In This Thread

getting $host from $_SERVER - by badger - 02-26-2023, 08:25 AM

RE: getting $host from $_SERVER - by Gary - 02-26-2023, 11:02 AM

RE: getting $host from $_SERVER - by badger - 02-26-2023, 11:20 AM

RE: getting $host from $_SERVER - by kenjis - 02-26-2023, 07:17 PM

RE: getting $host from $_SERVER - by badger - 02-27-2023, 02:14 AM